Skip to content
OpenAdvisories
Medium · 4.2 CVE-2020-4954 EUVD-2020-26201GHSA-pvf9-39pw-fm6f

IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, caused by improper …

Published Feb 15, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, caused by improper session validation . By using the configuration panel to obtain a valid session using an attacker controlled IBM Spectrum Protect server, an attacker could exploit this vulnerability to bypass authentication and gain access to a limited number of debug functions, such as logging levels. IBM X-Force ID: 192153.

Affected products

VendorProductAffectedFixed
IBM Spectrum Protect Operations Center 8.1, 7.1, 8.1.10.100, 7.1.12 —

References